Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier: 9bPbPbYGErnXm0xwPokgUObidbAzwkclNrBp/hX4aKA=
Subject key identifier: 0D:DB:A1:B2:73:D8:88:E3:02:5A:D6:0A:79:BC:17:A1:D4:E7:4C:D6
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial: 019EBF2407DE481A8EB3CE7F939A9388444D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number: 1957
Signing time: Sat 13 Jun 2026 04:01:09 +0000
Manifest this update: Sat 13 Jun 2026 04:01:09 +0000
Manifest next update: Sun 14 Jun 2026 04:01:09 +0000
Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: l1KYemMGx0phlBSfcwQBaaW3zr3mTNRFJqveDIkVnOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:24:07:de:48:1a:8e:b3:ce:7f:93:9a:93:88:44:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Validity
Not Before: Jun 13 04:01:09 2026 GMT
Not After : Jun 14 04:01:09 2026 GMT
Subject: CN=0ddba1b273d888e3025ad60a79bc17a1d4e74cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:9b:06:0a:8f:a7:2b:d9:3f:04:45:0c:10:
fe:89:f4:8e:77:ea:cc:4e:62:b5:30:02:27:28:d6:
33:e8:ca:0c:c1:94:c1:02:42:be:b7:3d:fc:0a:32:
8e:90:61:ad:20:fd:97:3c:f8:58:4e:da:2e:2c:be:
91:d0:f4:75:94:7e:cb:c1:de:65:02:10:13:8c:39:
34:8f:05:ab:0b:25:6c:2e:64:6f:cf:11:23:5a:b8:
a9:bd:bc:02:12:29:81:80:c3:2b:3f:27:73:28:6e:
a5:87:f5:3c:9e:f6:9f:ce:9e:08:9c:74:d5:a0:88:
81:b1:a8:cb:90:14:39:78:5d:05:00:e5:1f:d3:43:
24:c7:f5:e6:b6:9d:67:6d:d7:74:bc:88:8c:70:15:
2d:2f:cf:3b:c7:af:c1:bf:4b:50:7d:4a:34:25:76:
9d:0b:03:08:54:b3:5e:fd:84:28:1f:42:ff:b8:78:
fc:11:e8:94:43:cf:2c:69:92:ca:3c:f9:ff:ee:01:
ee:21:16:33:26:78:2d:ba:64:ad:73:5a:70:70:87:
70:e6:36:b1:28:17:a7:32:00:bb:26:d5:99:0e:e8:
e2:7e:02:f9:96:00:0b:06:a5:ec:4a:35:9c:3c:99:
80:a7:25:e9:fb:1c:07:a9:c8:7a:e6:8a:16:29:4c:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DB:A1:B2:73:D8:88:E3:02:5A:D6:0A:79:BC:17:A1:D4:E7:4C:D6
X509v3 Authority Key Identifier:
keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9b:ce:b8:a6:81:f1:03:9f:57:e1:1c:ce:1e:b3:88:81:53:
ab:52:ab:5a:01:78:6f:56:e1:93:c9:12:a4:06:6e:cd:c1:9d:
d8:0d:7a:9a:96:42:3e:a7:42:f0:97:aa:6b:00:0e:25:98:d4:
b6:c7:f5:4a:77:36:fa:86:00:b3:a6:ff:47:41:5a:5a:c8:54:
8f:0a:25:a4:1e:ca:4a:31:10:b2:c0:6c:57:57:32:41:9a:b8:
a0:7e:2f:93:3e:9b:22:f2:a4:b2:3d:0c:1b:2e:13:70:6f:19:
18:72:da:c9:ec:70:a5:d6:f0:2d:89:4f:31:18:72:e1:99:16:
34:2c:a6:8e:92:e8:71:c7:5f:5f:0a:ca:20:55:08:99:c6:f6:
45:ad:d1:f6:c8:6f:d8:f2:f9:1b:c2:a8:7d:f3:eb:ce:d6:11:
fe:15:e9:38:91:81:e2:a3:9a:5d:a1:be:b8:23:d7:77:91:69:
4b:1c:87:1e:e5:5e:63:49:4b:de:69:11:0a:18:78:1a:a0:6b:
2d:52:cf:5b:22:61:6e:e3:b9:d8:69:25:61:13:e8:11:bb:8e:
ad:cb:68:06:f4:21:3e:7e:08:2a:e4:50:f3:b8:5b:83:73:5c:
98:39:2a:3c:49:c5:38:c0:38:79:f7:e5:02:9e:0e:c7:12:08:
3d:01:d4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:22:38 2026 by rpki-client